Nobody put the composer.lock in their lib:

* https://github.com/fabpot/Twig
* https://github.com/fabpot/Pimple
* https://github.com/symfony/symfony
* https://github.com/guzzle/guzzle
* https://github.com/kriswallsmith/Buzz
* https://github.com/Seldaek/monolog
* https://github.com/zendframework/zf2
* https://github.com/doctrine/doctrine2
 etc etc